Re: accessing one master via multiple hostnames (internal & external)

[jcbollinger]

On Thursday, May 23, 2013 6:01:14 AM UTC-5, Ernest Beinrohr wrote:

Hi, I currently use one puppetmaster for my external and internal servers. For the externals however I have to modify my /etc/hosts for puppet to work.

Is it possible to use a different hostname for my master without the agents complaining?

Yes.  You need to generate a certificate for the server that includes the external DNS name as an alternative name (supposing that its sense of its own hostname is the internal name).  See here http://serverfault.com/questions/320028/how-to-add-multiple-dns-names-to-my-puppetmaster for a fuller description.

Note that that answer claims you can replace the master's certificate (but not the CA certificate) without interfering with clients that have already been issued certs.  That's plausible -- indeed, it should be the case -- but I cannot personally confirm it.


John